CVE-2026-104286: FortiMail Zero-Day Exploited for Unauthenticated File Writes
In short: CVE-2026-104286 is a critical (CVSS 9.8) path traversal vulnerability in Fortinet FortiMail that lets an unauthenticated attacker write
NeedyMantis Malware: China-Linked Backdoor Built for Long-Term Network Access
In short: Microsoft Threat Intelligence has documented NeedyMantis, a previously unknown modular backdoor used after attackers already have a foothold,
CVE-2026-61500: Rejetto HFS Session Forgery Leads to RCE as Scanning Begins
In short: CVE-2026-61500 is a critical (CVSS 9.3) authentication bypass in Rejetto HTTP File Server (HFS) 3.x. Because the server’s
Pixel 10 Hacked Three Times at Pwn2Own Ireland 2026: What We Know
In short: Google’s Pixel 10 was successfully attacked three times on October 8, 2026, during Pwn2Own Ireland in Cork, even
Burp Suite for Web Penetration Testing: Proxying, Repeater, Intruder
1. Introduction Burp Suite is one of the most widely used tools in web application penetration testing. Security professionals use
SQLmap Tutorial: Detecting and Validating SQL Injection in Authorized Tests
SQLmap is an open-source command-line tool that automates the detection and exploitation of SQL injection flaws. In a penetration test,
Touch — HTB Walkthrough: From a Leaky API to a Kiosk Foothold
Touch is a beginner-friendly Windows box on Hack The Box that’s less about brute-forcing your way in and more about
Linux Namespaces Deep Dive: PID, Mount, Network, User, IPC, and UTS Isolation
1. Introduction Linux Namespaces Deep Dive: PID, Mount, Network, User, IPC, and UTS Isolation is an advanced Linux security topic
Linux cgroups v2 Security: Resource Control, Delegation, and Container Abuse
1. Introduction Linux cgroups v2 Security: Resource Control, Delegation, and Container Abuse is an advanced Linux security topic because cgroups
eBPF Security on Linux: Observability, Detection, and Kernel Attack Surface
1. Introduction eBPF Security on Linux: Observability, Detection, and Kernel Attack Surface is an advanced Linux security topic because eBPF